Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8a4552-c39a-46f3-9a27-e1aaf7dc99ca.roa
File:                     aa8a4552-c39a-46f3-9a27-e1aaf7dc99ca.roa (raw, json)
Hash identifier:          44XCfT9VgwlfUVyWgw6aJ28MijrKP3lhsloZutRIRoM=
Subject key identifier:   0C:AD:D8:53:D2:51:81:7B:19:ED:8B:66:52:C7:50:40:A4:2A:97:39
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       5FC4110C2B92F2C9B346AEEB2B15812049336B73
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8a4552-c39a-46f3-9a27-e1aaf7dc99ca.roa
Signing time:             Fri 03 Apr 2026 01:00:39 +0000
ROA not before:           Fri 03 Apr 2026 01:00:39 +0000
ROA not after:            Thu 02 Jul 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:9000:1ebd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c4:11:0c:2b:92:f2:c9:b3:46:ae:eb:2b:15:81:20:49:33:6b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: Apr  3 01:00:39 2026 GMT
            Not After : Jul  2 23:59:59 2026 GMT
        Subject: serialNumber=ee005265c085426946e523d69525dd71ad004544b3df42a7f708137f1cc497aa, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:f9:e4:f0:a6:1e:cd:ae:a4:05:f9:c2:7c:
                    22:3c:40:3a:90:42:ff:5c:74:d1:0f:7e:87:09:ff:
                    32:f7:a4:06:34:63:65:6e:8c:c9:da:d6:14:1b:35:
                    ad:84:57:a4:68:88:6c:c1:b6:46:9e:28:4f:8a:83:
                    26:ef:72:81:14:30:14:00:6b:72:e6:3d:76:16:df:
                    51:44:03:c9:dc:2c:39:f9:35:fc:0f:c6:15:0c:13:
                    83:8a:b1:d6:3c:07:13:5f:a0:5a:dd:5b:82:88:2a:
                    e8:9a:be:0e:e2:94:94:91:5a:d6:0d:5d:f2:7b:7d:
                    13:ef:89:e4:53:86:3f:28:4e:a8:91:0b:b4:6e:52:
                    78:46:df:71:ec:09:1f:89:ee:e9:80:7d:4f:9b:5f:
                    80:23:89:27:92:4e:fd:bd:5d:88:dd:db:e5:f3:5e:
                    9a:09:51:ee:62:ce:5a:b7:e1:d0:54:80:a2:0f:f5:
                    a6:e5:10:be:3a:82:3f:94:77:83:ec:46:39:b3:4f:
                    e6:5f:61:34:d5:c9:5c:9e:13:68:a7:5b:54:cb:e0:
                    c1:2d:5b:f5:e5:be:13:53:60:0f:ff:f1:63:44:32:
                    49:e3:8d:4c:22:68:30:96:3b:4b:68:fe:dc:01:3d:
                    06:8e:8c:61:2f:54:6f:d7:26:a7:17:a7:52:86:86:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:D8:53:D2:51:81:7B:19:ED:8B:66:52:C7:50:40:A4:2A:97:39
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/aa8a4552-c39a-46f3-9a27-e1aaf7dc99ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:1ebd::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:fb:05:47:b2:c5:dd:f3:c0:c1:85:4c:bd:5d:84:f5:27:3a:
         61:24:b4:d7:4c:01:11:c1:35:0a:33:2c:13:7f:63:77:6e:0d:
         dd:8a:b2:0c:b4:7f:67:83:68:dc:52:11:4d:9a:f8:7c:3e:1b:
         85:6e:fd:32:53:d3:50:e2:7f:b0:9b:fd:ff:c2:54:5b:cf:70:
         5e:e2:c1:4f:90:de:cc:f1:ef:ae:c5:fa:1d:ce:68:c8:cb:00:
         f9:cd:1a:6f:f1:51:3e:76:46:96:41:65:67:bb:97:38:03:54:
         1a:14:eb:b7:ca:d1:23:58:fa:4b:35:7e:7c:15:0b:89:86:ed:
         59:89:1e:23:1b:91:ab:eb:2a:16:f5:82:13:82:3e:94:08:75:
         f8:be:ec:c8:70:d6:d9:63:3d:54:af:e1:04:7d:15:fc:3e:20:
         5b:46:61:61:3e:79:35:0a:b6:c7:ed:8e:d9:d6:81:2f:3f:e2:
         28:3c:f8:c6:1e:88:7d:21:d1:20:12:b3:01:16:00:80:8d:86:
         4c:d6:36:3e:11:5c:5a:24:b5:33:32:2b:9a:32:0e:ac:3e:c6:
         f7:b7:8e:03:88:13:b0:d0:83:85:d1:6d:a0:9c:73:48:20:1c:
         8a:18:26:83:8c:b3:7c:d6:0e:8a:4e:d1:32:4c:2f:20:10:ab:
         6b:4f:5c:2d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:07:45 2026 by rpki-client